Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    L2TP shared secret for link/interface configuration

    Scheduled Pinned Locked Moved General pfSense Questions
    9 Posts 4 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      hvisage
      last edited by

      Hi there,

      Trying to setup a "Static IP" setup for an Axxess account over ADSL/PPoE.

      the Static IP instructions from https://www.axxess.co.za/staticip.php

      How to set-up:

      Go to the VPN settings on your router or use server software
          Find the L2TP section
          Enter the following authentication details:
          L2TP Service IP: 196.30.121.50
          Shared Secret: h3lp
          Enter your Axxess ADSL account details (username & password)

      Their "support" have said here http://mybroadband.co.za/vb/showthread.php/553831-Axxess-static-IP-on-Mikrotik-Router?p=11323125#post11323125

      that:

      support@mikrotik.com have not supplied any further help in resolving the tunnel authentication issue (they don’t completely support rfc2661/rfc3931). That is why we have chosen the specific routers that we have, as they comply with rfc2661/rfc3931.

      You can find these rfc’s at http://www.ietf.org/rfc/rfc2661.txt and http://tools.ietf.org/html/rfc3931#section-5.4.3.

      Any help/advice on how to set this up on pfSense?

      1 Reply Last reply Reply Quote 0
      • G Offline
        grasmuis
        last edited by

        Did you manage to get this working? I need to setup the same with Afrihost static ip.

        Thanks

        @hvisage:

        Hi there,

        Trying to setup a "Static IP" setup for an Axxess account over ADSL/PPoE.

        the Static IP instructions from https://www.axxess.co.za/staticip.php

        How to set-up:

        Go to the VPN settings on your router or use server software
            Find the L2TP section
            Enter the following authentication details:
            L2TP Service IP: 196.30.121.50
            Shared Secret: h3lp
            Enter your Axxess ADSL account details (username & password)

        Their "support" have said here http://mybroadband.co.za/vb/showthread.php/553831-Axxess-static-IP-on-Mikrotik-Router?p=11323125#post11323125

        that:

        support@mikrotik.com have not supplied any further help in resolving the tunnel authentication issue (they don’t completely support rfc2661/rfc3931). That is why we have chosen the specific routers that we have, as they comply with rfc2661/rfc3931.

        You can find these rfc’s at http://www.ietf.org/rfc/rfc2661.txt and http://tools.ietf.org/html/rfc3931#section-5.4.3.

        Any help/advice on how to set this up on pfSense?

        1 Reply Last reply Reply Quote 0
        • H Offline
          hvisage
          last edited by

          :'( nope. sorry.

          1 Reply Last reply Reply Quote 0
          • T Offline
            Tweebeenvis
            last edited by

            Anybody have any luck with this yet? Would be awesome to get this working….

            1 Reply Last reply Reply Quote 0
            • H Offline
              hvisage
              last edited by

              nope ;(

              1 Reply Last reply Reply Quote 0
              • M Offline
                MrsPotter
                last edited by

                Bump. I know this is an old topic. However, it seems no one has managed to solve this yet?

                1 Reply Last reply Reply Quote 0
                • H Offline
                  hvisage
                  last edited by

                  Somebody needs to code it….

                  1 Reply Last reply Reply Quote 0
                  • M Offline
                    MrsPotter
                    last edited by

                    I'm trying to understand how this is supposed to work:

                    Do they use L2TP instead of PPPoE? In other words you'll need to setup L2TP at interface level. Or is the L2TP encapsulation on top of the PPPoE? In other words you setup the PPPoE interface as usual and then configure the L2TP encapsulation within the VPN settings?

                    If it is the latter case it shouldn't be too hard to setup an L2TP client on the pfSense side.

                    But really I'm just thinking out loud here…

                    1 Reply Last reply Reply Quote 0
                    • H Offline
                      hvisage
                      last edited by

                      ADSL (at least here in South Africa ;) ) is provisioned using PPPoE to setup the connection via Telkom (the big monopoly on copper last mile) to the chosen ISP's IPC (The ISP's data centre from where they provide the internet data)

                      So that is the part that is a constant for all the users and ISPs, and Telkom issues a random IP for the duration of your connection from the network block the ISP have provided Telkom for their users in a certain region.

                      The L2TP is then a separate tunnel (as would've been any other VPN/tunnel over OpenVPN/IPSEC/L2TP/PPTP/etc.) over the internet (though in the case in point it's using the ADSL line  with PPPoE) to then  provide a fixed IP address for the user of that ISP.

                      The issues is specifically the authentication/shared secret part of the L2TP over IPSEC that is not usually implemented by pfSense and other opensource L2TP codes, but typically only by the closed source "pricey" routers the ISPs then dish out for these static IP solutions.

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.